Can someone please explain rigorously the reasoning behing non-ideal ($\epsilon$-concealing and $\delta$-binding) bit commitment scheme and the impossibility of coin tossing.
What is bias in coin tossing? How to use non-ideal bit commitment scheme to come up with non-ideal coin tossing and how to estimate the bias.
Lo-Chau paper "Why quantum bit commitment and ideal coin tossing are impossible" has some of the details, but it looks like it omits a lot of details we could add 22 years later.
And I could not understand Mayers' work "Trouble with quantum bit commitment".
Thank you very much.